Lucene search
+L

4928 matches found

Cvelist
Cvelist
•added 2021/10/08 8:50 p.m.•38 views

CVE-2021-30627

Type confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.9AI score0.00905EPSS
SaveExploits0References4
CVE
CVE
•added 2021/10/08 8:50 p.m.•209 views

CVE-2021-30627

CVE-2021-30627 describes a type confusion in Blink layout in Google Chrome prior to 93.0.4577.82, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. The connected documents identify the same description across multiple sources (Astra Linux security...

8.8CVSS8.6AI score0.00905EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2021/10/08 8:50 p.m.•61 views

CVE-2021-30627

Type confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.6AI score0.00905EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2021/10/08 8:50 p.m.•776 views

CVE-2021-30627

Type confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.6AI score0.00905EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/08 12:00 a.m.•5 views

CVE-2021-30627: Access of Resource Using Incompatible Type

Type confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.5AI score0.00905EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/10/06 6:15 p.m.•10 views

CVE-2021-25476

An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection mechanism in TEE...

4.4CVSS5.1AI score0.00099EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/10/06 3:15 p.m.•13 views

CVE-2021-0687

In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Androi...

5CVSS6.8AI score0.00122EPSS
SaveExploits0References2
Prion
Prion
•added 2021/10/06 3:15 p.m.•24 views

Input validation

In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Androi...

1.9CVSS5AI score0.00122EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2021/10/06 12:00 a.m.•15 views

Samsung SMR 安全漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in versions prior to Samsung SMR Oct-2021 Release 1, which stems from information leakage in the Widevine TA logs, allowing an attacker to exploit t...

4.4CVSS5.2AI score0.00099EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/10/05 12:00 a.m.•14 views

The vulnerability in the `drivers/net/ethernet/xilinx/xilinx_emaclite.c` component of the Linux operating system allows a hacker to bypass the ASLR protection mechanism.

The vulnerability in the drivers/net/ethernet/xilinx/xilinxemaclite.c component of the Linux kernel is related to the use of uninitialized memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...

3.3CVSS6.5AI score0.00315EPSS
SaveExploits0References26Affected Software4
OSV
OSV
•added 2021/09/29 4:15 p.m.•13 views

CVE-2021-39833

Adobe Framemaker versions 2019 Update 8 and earlier and 2020 Release Update 2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this...

3.3CVSS7.2AI score0.0133EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/09/27 4:15 p.m.•9 views

CVE-2021-24634

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.3 does not properly sanitise or escape some of the properties of the Recipe Card Block such as ingredientsLayout, iconSet, steps, ingredients, recipeTitle, or settings, which could allow users with a role as low as contributor to perfor...

5.4CVSS6AI score0.00624EPSS
SaveExploits2References2
OSV
OSV
•added 2021/09/22 8:37 p.m.•27 views

GHSA-VRXP-MG9F-HWF3 Improperly Implemented path matching for in-toto-golang

Impact Authenticated attackers posing as functionaries i.e., within a trusted set of users for a layout are able to create attestations that may bypass DISALLOW rules in the same layout. An attacker with access to trusted private keys, may issue an attestation that contains a disallowed artifact ...

5.6CVSS6.4AI score0.0043EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
•added 2021/09/16 2:00 p.m.•53 views

Chromium: CVE-2021-30627 Type Confusion in Blink layout

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS7.9AI score0.00905EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2021/09/16 7:00 a.m.•48 views

Chromium: CVE-2021-30631 Type Confusion in Blink layout

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8AI score
SaveExploits0
Veracode
Veracode
•added 2021/09/15 2:04 a.m.•35 views

Information Disclosure

chromium is vulnerable to information disclosure. The vulnerability exists due to a type Confusion in Blink layout...

8.8CVSS8AI score0.00905EPSS
SaveExploits0References7Affected Software3
CNVD
CNVD
•added 2021/09/14 12:00 a.m.•70 views

Google Chrome Type Obfuscation Vulnerability (CNVD-2021-92834)

Chrome is a simple and efficient web browsing tool developed by Google. a type obfuscation vulnerability exists in the Blink layout in versions prior to Google Chrome 93.0.4577.82. An attacker could exploit this vulnerability to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.4AI score0.00905EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/09/14 12:00 a.m.•32 views

Google Chrome Blink layout code execution vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in the Google Chrome Blink layout. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

8.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/09/14 12:00 a.m.•6 views

PT-2021-6865 · Adobe · Acrobat 2020 +5

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat versions prior to 2021.005.20060 Adobe Acrobat Reader versions prior to 2021.005.20060 Adobe Acrobat 2017 versions prior to 2017.011.30199 Adobe Acrobat Reader 2017 versions prior to 2017.011.30199 Adobe Acrobat 2020 versions...

5.5CVSS6.5AI score0.00437EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2021/09/14 12:00 a.m.•74 views

Google Chrome < 93.0.4577.82 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 93.0.4577.82. It is, therefore, affected by multiple vulnerabilities as referenced in the 202109stable-channel-update-for-desktop advisory. - Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allow...

9.6CVSS8.7AI score0.6319EPSS
SaveExploits4References17
Rows per page
Query Builder